Excel flagged as corporate security weak spot